mcp4openapi 0.2.7 → 0.3.0

package/dist/src/core/cli-config.js

@@ -0,0 +1,124 @@
+/**
+ * CLI config helpers
+ *
+ * Why: Shared parsing and env override logic with tests.
+ */
+import { UnknownCliFlagError } from './errors.js';
+export function flagToEnvVar(flag) {
+    return `MCP4_${flag.replace(/-/g, '_').toUpperCase()}`;
+}
+const KNOWN_ENV_VARS = new Set([
+    'MCP4_API_TOKEN',
+    'MCP4_PROFILE',
+    'MCP4_PROFILES_DIR',
+    'MCP4_PROFILE_PATH',
+    'MCP4_OPENAPI_SPEC_PATH',
+    'MCP4_TRANSPORT',
+    'MCP4_API_BASE_URL',
+    'MCP4_TOOL_FILTER_ALLOW_NAMES',
+    'MCP4_TOOL_FILTER_ALLOW_NAME_REGEX',
+    'MCP4_TOOL_FILTER_DENY_NAMES',
+    'MCP4_TOOL_FILTER_DENY_NAME_REGEX',
+    'MCP4_TOOL_FILTER_ALLOW_CATEGORIES',
+    'MCP4_TOOL_FILTER_WARN_THRESHOLD_PCT',
+    'MCP4_TOOL_FILTER_SESSION_MAX_TOOLS',
+    'MCP4_AUTH_ENV_VAR',
+    'MCP4_AUTH_FORCE',
+    'MCP4_AUTH_TYPE',
+    'MCP4_AUTH_HEADER_NAME',
+    'MCP4_AUTH_QUERY_PARAM',
+    'MCP4_PROXY_MAX_BYTES',
+    'MCP4_TOOLNAME_MAX',
+    'MCP4_TOOLNAME_STRATEGY',
+    'MCP4_TOOLNAME_WARN_ONLY',
+    'MCP4_TOOLNAME_SIMILAR_TOP',
+    'MCP4_TOOLNAME_SIMILARITY_THRESHOLD',
+    'MCP4_TOOLNAME_MIN_PARTS',
+    'MCP4_TOOLNAME_MIN_LENGTH',
+    'MCP4_HOST',
+    'MCP4_PORT',
+    'MCP4_ALLOWED_ORIGINS',
+    'MCP4_SESSION_TIMEOUT_MS',
+    'MCP4_OAUTH_SESSION_TIMEOUT_MS',
+    'MCP4_OAUTH_REFRESH_THRESHOLD_MS',
+    'MCP4_HEARTBEAT_ENABLED',
+    'MCP4_HEARTBEAT_INTERVAL_MS',
+    'MCP4_TOKEN_MAX_LENGTH',
+    'MCP4_FILTER_MAX_VALUES',
+    'MCP4_HTTP_PROFILE_ROUTING',
+    'MCP4_SSL_CERT_FILE',
+    'MCP4_SSL_KEY_FILE',
+    'MCP4_OAUTH_CLIENT_ID',
+    'MCP4_OAUTH_CLIENT_SECRET',
+    'MCP4_OAUTH_REDIRECT_URI',
+    'MCP4_OAUTH_ISSUER',
+    'MCP4_OAUTH_AUTHORIZATION_URL',
+    'MCP4_OAUTH_TOKEN_URL',
+    'MCP4_HTTP_RATE_LIMIT_ENABLED',
+    'MCP4_HTTP_RATE_LIMIT_WINDOW_MS',
+    'MCP4_HTTP_RATE_LIMIT_MAX_REQUESTS',
+    'MCP4_HTTP_RATE_LIMIT_METRICS_MAX',
+    'MCP4_OAUTH_RATE_LIMIT_MAX',
+    'MCP4_OAUTH_RATE_LIMIT_WINDOW_MS',
+    'MCP4_LOG_LEVEL',
+    'MCP4_LOG_FORMAT',
+    'MCP4_METRICS_ENABLED',
+    'MCP4_METRICS_PATH',
+]);
+const NON_ENV_FLAGS = new Set([
+    'list-profiles',
+]);
+export function parseCliArgs(argv) {
+    const args = {};
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === '-l') {
+            args['list-profiles'] = 'true';
+            continue;
+        }
+        if (!arg.startsWith('--'))
+            continue;
+        const raw = arg.slice(2);
+        if (!raw)
+            continue;
+        const eqIndex = raw.indexOf('=');
+        if (eqIndex !== -1) {
+            const key = raw.slice(0, eqIndex);
+            const value = raw.slice(eqIndex + 1);
+            args[key] = value;
+            continue;
+        }
+        const next = argv[i + 1];
+        if (next && !next.startsWith('--')) {
+            args[raw] = next;
+            i += 1;
+            continue;
+        }
+        args[raw] = 'true';
+    }
+    return args;
+}
+export function applyCliEnvOverrides(args) {
+    const entries = Object.entries(args);
+    const unknown = [];
+    for (const [key] of entries) {
+        if (NON_ENV_FLAGS.has(key)) {
+            continue;
+        }
+        const envVar = flagToEnvVar(key);
+        if (!KNOWN_ENV_VARS.has(envVar)) {
+            unknown.push(key);
+        }
+    }
+    if (unknown.length > 0) {
+        throw new UnknownCliFlagError(unknown);
+    }
+    for (const [key, value] of entries) {
+        if (NON_ENV_FLAGS.has(key)) {
+            continue;
+        }
+        const envVar = flagToEnvVar(key);
+        process.env[envVar] = value;
+    }
+}
+//# sourceMappingURL=cli-config.js.map

package/dist/src/core/cli-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-config.js","sourceRoot":"","sources":["../../../src/core/cli-config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,gBAAgB;IAChB,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,gBAAgB;IAChB,mBAAmB;IACnB,8BAA8B;IAC9B,mCAAmC;IACnC,6BAA6B;IAC7B,kCAAkC;IAClC,mCAAmC;IACnC,qCAAqC;IACrC,oCAAoC;IACpC,mBAAmB;IACnB,iBAAiB;IACjB,gBAAgB;IAChB,uBAAuB;IACvB,uBAAuB;IACvB,sBAAsB;IACtB,mBAAmB;IACnB,wBAAwB;IACxB,yBAAyB;IACzB,2BAA2B;IAC3B,oCAAoC;IACpC,yBAAyB;IACzB,0BAA0B;IAC1B,WAAW;IACX,WAAW;IACX,sBAAsB;IACtB,yBAAyB;IACzB,+BAA+B;IAC/B,iCAAiC;IACjC,wBAAwB;IACxB,4BAA4B;IAC5B,uBAAuB;IACvB,wBAAwB;IACxB,2BAA2B;IAC3B,oBAAoB;IACpB,mBAAmB;IACnB,sBAAsB;IACtB,0BAA0B;IAC1B,yBAAyB;IACzB,mBAAmB;IACnB,8BAA8B;IAC9B,sBAAsB;IACtB,8BAA8B;IAC9B,gCAAgC;IAChC,mCAAmC;IACnC,kCAAkC;IAClC,2BAA2B;IAC3B,iCAAiC;IACjC,gBAAgB;IAChB,iBAAiB;IACjB,sBAAsB;IACtB,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YACjB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAA4B;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/src/{constants.d.ts → core/constants.d.ts}

@@ -59,6 +59,7 @@ export declare const OAUTH_PATHS: {
     readonly CALLBACK: "/oauth/callback";
     readonly REGISTER: "/oauth/register";
     readonly WELL_KNOWN_AUTHORIZATION_SERVER: "/.well-known/oauth-authorization-server";
+    readonly WELL_KNOWN_OPENID_CONFIGURATION: "/.well-known/openid-configuration";
     readonly WELL_KNOWN_PROTECTED_RESOURCE: "/.well-known/oauth-protected-resource/mcp";
 };
 /**

package/dist/src/core/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/core/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,eAAO,MAAM,IAAI;;;;;;CAMP,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;CAiBd,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,UAAU;;;;CAIb,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;;;;;CAQd,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,QAAQ;;;;;CAKX,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC"}

package/dist/src/{constants.js → core/constants.js}

@@ -59,6 +59,7 @@ export const OAUTH_PATHS = {
     CALLBACK: '/oauth/callback',
     REGISTER: '/oauth/register',
     WELL_KNOWN_AUTHORIZATION_SERVER: '/.well-known/oauth-authorization-server',
+    WELL_KNOWN_OPENID_CONFIGURATION: '/.well-known/openid-configuration',
     WELL_KNOWN_PROTECTED_RESOURCE: '/.well-known/oauth-protected-resource/mcp',
 };
 /**

package/dist/src/core/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/core/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,aAAa,EAAE,IAAI;IACnB,aAAa,EAAE,KAAK;IACpB,WAAW,EAAE,OAAO;IACpB,kBAAkB,EAAE,EAAE;IACtB,gBAAgB,EAAE,EAAE;CACZ,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,EAAE,EAAE,GAAG;IACP,OAAO,EAAE,GAAG;IACZ,QAAQ,EAAE,GAAG;IACb,KAAK,EAAE,GAAG;IACV,gBAAgB,EAAE,GAAG;IACrB,WAAW,EAAE,GAAG;IAChB,YAAY,EAAE,GAAG;IACjB,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG;IACd,kBAAkB,EAAE,GAAG;IACvB,cAAc,EAAE,GAAG;IACnB,iBAAiB,EAAE,GAAG;IACtB,qBAAqB,EAAE,GAAG;IAC1B,WAAW,EAAE,GAAG;IAChB,mBAAmB,EAAE,GAAG;IACxB,eAAe,EAAE,GAAG;CACZ,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,kBAAkB;IACxB,YAAY,EAAE,mBAAmB;IACjC,eAAe,EAAE,mCAAmC;CAC5C,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,SAAS,EAAE,kBAAkB;IAC7B,KAAK,EAAE,cAAc;IACrB,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,iBAAiB;IAC3B,+BAA+B,EAAE,yCAAyC;IAC1E,+BAA+B,EAAE,mCAAmC;IACpE,6BAA6B,EAAE,2CAA2C;CAClE,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,kBAAkB,EAAE,EAAE,GAAG,IAAI,CAAC,aAAa,EAAG,aAAa;IAC3D,qBAAqB,EAAE,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa;IAC7D,oBAAoB,EAAE,IAAI,CAAC,aAAa,EAAM,WAAW;IACzD,mBAAmB,EAAE,IAAI,CAAC,aAAa,EAAO,WAAW;CACjD,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,YAAY,EAAE,EAAE,EAA+B,gCAAgC;IAC/E,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,aAAa,EAAa,oBAAoB;CAC3D,CAAC"}

package/dist/src/{errors.d.ts → core/errors.d.ts}

@@ -15,6 +15,9 @@ export declare class ValidationError extends MCPError {
 export declare class OperationNotFoundError extends MCPError {
     constructor(operationId: string);
 }
+export declare class ResourceNotFoundError extends MCPError {
+    constructor(resource: string, resourceType?: string);
+}
 export declare class ParameterError extends MCPError {
     constructor(paramName: string, reason: string);
 }
@@ -36,6 +39,9 @@ export declare class ConfigurationError extends MCPError {
 export declare class SessionError extends MCPError {
     constructor(message: string, sessionId?: string);
 }
+export declare class UnknownCliFlagError extends MCPError {
+    constructor(flags: string[]);
+}
 /**
  * Helper function to check if an error is an MCPError
  */

package/dist/src/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,qBAAa,QAAS,SAAQ,KAAK;IAGxB,IAAI,EAAE,MAAM;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAK3C;AAED,qBAAa,eAAgB,SAAQ,QAAQ;gBAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,sBAAuB,SAAQ,QAAQ;gBACtC,WAAW,EAAE,MAAM;CAQhC;AAED,qBAAa,qBAAsB,SAAQ,QAAQ;gBACrC,QAAQ,EAAE,MAAM,EAAE,YAAY,GAAE,MAAmB;CAQhE;AAED,qBAAa,cAAe,SAAQ,QAAQ;gBAC9B,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAQ9C;AAED,qBAAa,mBAAoB,SAAQ,QAAQ;gBACnC,OAAO,GAAE,MAAkC,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI3F;AAED,qBAAa,kBAAmB,SAAQ,QAAQ;gBAClC,OAAO,GAAE,MAAmC;CAIzD;AAED,qBAAa,cAAe,SAAQ,QAAQ;gBAC9B,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAIjD;AAED,qBAAa,YAAa,SAAQ,QAAQ;gBAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIpF;AAED,qBAAa,kBAAmB,SAAQ,QAAQ;gBAClC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,YAAa,SAAQ,QAAQ;gBAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;CAIhD;AAED,qBAAa,mBAAoB,SAAQ,QAAQ;gBACnC,KAAK,EAAE,MAAM,EAAE;CAS5B;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoBvE"}

package/dist/src/{errors.js → core/errors.js}

@@ -4,6 +4,7 @@
  * Provides type-safe error handling with machine-readable error codes
  * and structured error details for better debugging and client handling.
  */
+import { randomUUID } from 'node:crypto';
 export class MCPError extends Error {
     constructor(message, code, details) {
         super(message);
@@ -24,6 +25,12 @@ export class OperationNotFoundError extends MCPError {
         this.name = 'OperationNotFoundError';
     }
 }
+export class ResourceNotFoundError extends MCPError {
+    constructor(resource, resourceType = 'Resource') {
+        super(`${resourceType} not found: ${resource}`, 'RESOURCE_NOT_FOUND', { resource, resourceType });
+        this.name = 'ResourceNotFoundError';
+    }
+}
 export class ParameterError extends MCPError {
     constructor(paramName, reason) {
         super(`Invalid parameter '${paramName}': ${reason}`, 'PARAMETER_ERROR', { paramName, reason });
@@ -66,6 +73,13 @@ export class SessionError extends MCPError {
         this.name = 'SessionError';
     }
 }
+export class UnknownCliFlagError extends MCPError {
+    constructor(flags) {
+        const sortedFlags = [...flags].sort();
+        super(`Unknown CLI flags: ${sortedFlags.join(', ')}`, 'UNKNOWN_CLI_FLAG', { flags: sortedFlags });
+        this.name = 'UnknownCliFlagError';
+    }
+}
 /**
  * Helper function to check if an error is an MCPError
  */
@@ -78,12 +92,7 @@ export function isMCPError(error) {
  * Why: Allows matching client-reported errors with server logs
  */
 export function generateCorrelationId() {
-    // Simple UUID v4 implementation
-    return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {
-        const r = Math.random() * 16 | 0;
-        const v = c === 'x' ? r : (r & 0x3 | 0x8);
-        return v.toString(16);
-    });
+    return randomUUID();
 }
 /**
  * Helper function to get error details for logging

package/dist/src/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YACE,OAAe,EACR,IAAY,EACZ,OAAiC;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAA0B;QAGxC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IAC3C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,QAAQ;IAClD,YAAY,WAAmB;QAC7B,KAAK,CACH,wBAAwB,WAAW,EAAE,EACrC,qBAAqB,EACrB,EAAE,WAAW,EAAE,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,QAAQ;IACjD,YAAY,QAAgB,EAAE,eAAuB,UAAU;QAC7D,KAAK,CACH,GAAG,YAAY,eAAe,QAAQ,EAAE,EACxC,oBAAoB,EACpB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC3B,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,QAAQ;IAC1C,YAAY,SAAiB,EAAE,MAAc;QAC3C,KAAK,CACH,sBAAsB,SAAS,MAAM,MAAM,EAAE,EAC7C,iBAAiB,EACjB,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,QAAQ;IAC/C,YAAY,UAAkB,yBAAyB,EAAE,OAAiC;QACxF,KAAK,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,QAAQ;IAC9C,YAAY,UAAkB,0BAA0B;QACtD,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,QAAQ;IAC1C,YAAY,OAAe,EAAE,UAAmB;QAC9C,KAAK,CAAC,OAAO,EAAE,qBAAqB,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,QAAQ;IACxC,YAAY,OAAe,EAAE,UAAmB,EAAE,OAAiC;QACjF,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,QAAQ;IAC9C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,QAAQ;IACxC,YAAY,OAAe,EAAE,SAAkB;QAC7C,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,QAAQ;IAC/C,YAAY,KAAe;QACzB,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,KAAK,CACH,sBAAsB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9C,kBAAkB,EAClB,EAAE,KAAK,EAAE,WAAW,EAAE,CACvB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,KAAK,YAAY,QAAQ,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACpC,CAAC"}

package/dist/src/core/filtering.d.ts

@@ -0,0 +1,19 @@
+import type { ToolDefinition } from '../types/profile.js';
+import type { OperationInfo } from '../types/openapi.js';
+export type FilteringRules = Record<string, string[]>;
+export interface FilteringParseResult {
+    filtering: FilteringRules;
+    normalizedHeader: string;
+}
+export declare function normalizeFilteringHeaderValue(value?: string): string | undefined;
+export declare function parseFilteringHeader(headerValue: string): FilteringParseResult;
+export declare function isControlKey(key: string): boolean;
+export declare function getFilterMaxValues(): number;
+export declare function enforceFiltering(context: {
+    filtering: FilteringRules;
+    toolDef: ToolDefinition;
+    args: Record<string, unknown>;
+    parameterAliases?: Record<string, string[]>;
+    operation?: OperationInfo;
+}): void;
+//# sourceMappingURL=filtering.d.ts.map

package/dist/src/core/filtering.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filtering.d.ts","sourceRoot":"","sources":["../../../src/core/filtering.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOzD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,cAAc,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,6BAA6B,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOhF;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,CA2D9E;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEjD;AAaD,wBAAgB,kBAAkB,IAAI,MAAM,CAY3C;AAyJD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IACxC,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B,GAAG,IAAI,CA+BP"}

package/dist/src/core/filtering.js

@@ -0,0 +1,292 @@
+import { AuthorizationError, ValidationError } from './errors.js';
+const CONTROL_KEYS = new Set(['_allow_list', '_allow_read']);
+const KEY_PATTERN = /^[A-Za-z0-9_][A-Za-z0-9_-]{0,63}$/;
+export function normalizeFilteringHeaderValue(value) {
+    if (value === undefined || value === null) {
+        return undefined;
+    }
+    const normalized = value.trim();
+    return normalized.length > 0 ? normalized : undefined;
+}
+export function parseFilteringHeader(headerValue) {
+    const normalizedHeader = normalizeFilteringHeaderValue(headerValue);
+    if (!normalizedHeader) {
+        return { filtering: Object.create(null), normalizedHeader: '' };
+    }
+    const maxValues = getFilterMaxValues();
+    const filtering = Object.create(null);
+    const parts = normalizedHeader.split(',');
+    for (const part of parts) {
+        const trimmed = part.trim();
+        if (!trimmed) {
+            continue;
+        }
+        const equalsIndex = trimmed.indexOf('=');
+        if (equalsIndex === -1) {
+            if (!CONTROL_KEYS.has(trimmed) || !KEY_PATTERN.test(trimmed)) {
+                throw new ValidationError('Invalid X-Mcp4-Params header. Expected comma-separated key=value pairs.');
+            }
+            filtering[trimmed] = filtering[trimmed] ?? [];
+            continue;
+        }
+        const key = trimmed.slice(0, equalsIndex).trim();
+        const rawValue = trimmed.slice(equalsIndex + 1).trim();
+        if (!key || !KEY_PATTERN.test(key)) {
+            throw new ValidationError('Invalid X-Mcp4-Params header. Expected comma-separated key=value pairs.');
+        }
+        if (CONTROL_KEYS.has(key)) {
+            throw new ValidationError('Invalid X-Mcp4-Params header. Expected comma-separated key=value pairs.');
+        }
+        if (!rawValue) {
+            continue;
+        }
+        let decodedValue;
+        try {
+            decodedValue = decodeURIComponent(rawValue);
+        }
+        catch {
+            throw new ValidationError('Invalid X-Mcp4-Params header. Expected comma-separated key=value pairs.');
+        }
+        const values = filtering[key] ?? [];
+        if (values.length >= maxValues) {
+            throw new ValidationError(`X-Mcp4-Params exceeds max values for key '${key}'. Max allowed is ${maxValues}.`);
+        }
+        values.push(decodedValue);
+        filtering[key] = values;
+    }
+    return { filtering, normalizedHeader };
+}
+export function isControlKey(key) {
+    return CONTROL_KEYS.has(key);
+}
+export function getFilterMaxValues() {
+    const raw = process.env.MCP4_FILTER_MAX_VALUES;
+    if (raw === undefined) {
+        return 10;
+    }
+    const parsed = parseInt(raw, 10);
+    if (Number.isNaN(parsed) || parsed <= 0) {
+        throw new ValidationError(`Invalid MCP4_FILTER_MAX_VALUES: expected positive integer, got '${raw}'.`);
+    }
+    return parsed;
+}
+function prepareFilteringContext(filtering, toolDef, args, parameterAliases, operation) {
+    const aliasToCanonical = buildAliasToCanonical(parameterAliases);
+    const toolParamGroups = buildToolParamGroups(toolDef, parameterAliases, aliasToCanonical);
+    const filterKeys = Object.keys(filtering).filter(key => !isControlKey(key));
+    validateFilterKeys(filterKeys, toolParamGroups, toolDef.parameters);
+    const allowedByCanonical = buildAllowedByCanonical(filterKeys, filtering, aliasToCanonical, toolParamGroups);
+    const applicableCanonicals = Array.from(allowedByCanonical.keys());
+    const operationCategory = resolveOperationCategory(operation, args['action']);
+    return {
+        aliasToCanonical,
+        toolParamGroups,
+        allowedByCanonical,
+        applicableCanonicals,
+        operationCategory,
+        hasAnyFilterParam: applicableCanonicals.some(canonical => {
+            const group = toolParamGroups.get(canonical);
+            return group ? getArgumentValue(args, group.names) !== undefined : false;
+        }),
+        permissions: {
+            allowList: Object.prototype.hasOwnProperty.call(filtering, '_allow_list'),
+            allowRead: Object.prototype.hasOwnProperty.call(filtering, '_allow_read')
+        },
+        action: typeof args['action'] === 'string' ? args['action'] : undefined
+    };
+}
+function buildAllowedByCanonical(filterKeys, filtering, aliasToCanonical, toolParamGroups) {
+    const allowedByCanonical = new Map();
+    for (const key of filterKeys) {
+        const canonical = aliasToCanonical.get(key) ?? key;
+        if (!toolParamGroups.has(canonical)) {
+            continue;
+        }
+        const values = filtering[key] ?? [];
+        if (values.length === 0) {
+            continue;
+        }
+        const existing = allowedByCanonical.get(canonical) ?? [];
+        existing.push(...values);
+        allowedByCanonical.set(canonical, dedupe(existing));
+    }
+    return allowedByCanonical;
+}
+function validateParameterValue(argValue, allowedValues, canonical) {
+    const allowedSet = new Set(allowedValues);
+    if (Array.isArray(argValue)) {
+        for (const item of argValue) {
+            if (!isPrimitiveValue(item)) {
+                throw new AuthorizationError(`Filter conflict for '${canonical}': expected one of [${allowedValues.join(', ')}], got '${formatValue(item)}'.`);
+            }
+            const stringValue = String(item);
+            if (!allowedSet.has(stringValue)) {
+                throw new AuthorizationError(`Filter conflict for '${canonical}': expected one of [${allowedValues.join(', ')}], got '${stringValue}'.`);
+            }
+        }
+        return;
+    }
+    if (typeof argValue === 'object' && argValue !== null) {
+        throw new AuthorizationError(`Filter conflict for '${canonical}': expected one of [${allowedValues.join(', ')}], got '${formatValue(argValue)}'.`);
+    }
+    const stringValue = String(argValue);
+    if (!allowedSet.has(stringValue)) {
+        throw new AuthorizationError(`Filter conflict for '${canonical}': expected one of [${allowedValues.join(', ')}], got '${stringValue}'.`);
+    }
+}
+function validateCanonicalParameter(ctx, canonical, args, toolDef) {
+    const allowedValues = ctx.allowedByCanonical.get(canonical) ?? [];
+    const group = ctx.toolParamGroups.get(canonical);
+    if (!group) {
+        return;
+    }
+    const paramDefinition = toolDef.parameters[canonical];
+    const argValue = getArgumentValue(args, group.names);
+    const { operationCategory, permissions, hasAnyFilterParam, action } = ctx;
+    const isList = operationCategory === 'list';
+    const isRead = operationCategory === 'read';
+    const isModify = operationCategory === 'modify';
+    if (argValue === undefined) {
+        if ((isList && permissions.allowList) || (isRead && permissions.allowRead)) {
+            return;
+        }
+        if (action && isRequiredForAction(paramDefinition, action)) {
+            throw new AuthorizationError(`Filter requires parameter '${canonical}' for tool '${toolDef.name}' action '${action}'.`);
+        }
+        if (isModify && hasAnyFilterParam) {
+            return;
+        }
+        if (isList || isRead || isModify) {
+            throw new AuthorizationError(`Filter requires parameter '${canonical}' for tool '${toolDef.name}'.`);
+        }
+        return;
+    }
+    // For list/read operations, allow _allow_list/_allow_read to relax value enforcement.
+    // This enables "read/list any" access while keeping modify operations constrained to the allow-set.
+    if ((isList && permissions.allowList) || (isRead && permissions.allowRead)) {
+        return;
+    }
+    validateParameterValue(argValue, allowedValues, canonical);
+}
+export function enforceFiltering(context) {
+    const { filtering, toolDef, args, parameterAliases, operation } = context;
+    const filterKeys = Object.keys(filtering).filter(key => !isControlKey(key));
+    if (filterKeys.length === 0) {
+        return;
+    }
+    const ctx = prepareFilteringContext(filtering, toolDef, args, parameterAliases ?? {}, operation);
+    if (ctx.applicableCanonicals.length === 0) {
+        return;
+    }
+    if (ctx.operationCategory === 'modify' && !ctx.hasAnyFilterParam) {
+        for (const canonical of ctx.applicableCanonicals) {
+            const paramDefinition = toolDef.parameters[canonical];
+            if (ctx.action && isRequiredForAction(paramDefinition, ctx.action)) {
+                throw new AuthorizationError(`Filter requires parameter '${canonical}' for tool '${toolDef.name}' action '${ctx.action}'.`);
+            }
+        }
+        throw new AuthorizationError(`Filter requires at least one of [${ctx.applicableCanonicals.join(', ')}] for tool '${toolDef.name}'.`);
+    }
+    for (const canonical of ctx.applicableCanonicals) {
+        validateCanonicalParameter(ctx, canonical, args, toolDef);
+    }
+}
+function buildAliasToCanonical(parameterAliases) {
+    const aliasToCanonical = new Map();
+    for (const [canonical, aliases] of Object.entries(parameterAliases)) {
+        for (const alias of aliases) {
+            if (!aliasToCanonical.has(alias)) {
+                aliasToCanonical.set(alias, canonical);
+            }
+        }
+    }
+    return aliasToCanonical;
+}
+function buildToolParamGroups(toolDef, parameterAliases, aliasToCanonical) {
+    const groups = new Map();
+    for (const paramName of Object.keys(toolDef.parameters)) {
+        const canonical = aliasToCanonical.get(paramName) ?? paramName;
+        const aliasNames = parameterAliases[canonical] ?? [];
+        const group = groups.get(canonical) ?? { names: [] };
+        group.names = dedupe([canonical, ...aliasNames, paramName, ...group.names]);
+        groups.set(canonical, group);
+    }
+    return groups;
+}
+function validateFilterKeys(filterKeys, toolParamGroups, parameters) {
+    const allowedKeys = new Set();
+    for (const [canonical, group] of toolParamGroups.entries()) {
+        allowedKeys.add(canonical);
+        for (const name of group.names) {
+            allowedKeys.add(name);
+        }
+    }
+    for (const key of Object.keys(parameters)) {
+        allowedKeys.add(key);
+    }
+    const unknownKeys = filterKeys.filter(key => !allowedKeys.has(key));
+    if (unknownKeys.length === 0) {
+        return;
+    }
+    const allowedList = Array.from(allowedKeys).sort().join(', ');
+    throw new ValidationError(`Unknown filter key '${unknownKeys[0]}'. Allowed keys: ${allowedList}`);
+}
+function isRequiredForAction(paramDefinition, action) {
+    if (!paramDefinition) {
+        return false;
+    }
+    if (paramDefinition.required) {
+        return true;
+    }
+    if (!paramDefinition.required_for || paramDefinition.required_for.length === 0) {
+        return false;
+    }
+    return paramDefinition.required_for.includes(action);
+}
+function getArgumentValue(args, names) {
+    for (const name of names) {
+        if (args[name] !== undefined) {
+            return args[name];
+        }
+    }
+    return undefined;
+}
+function resolveOperationCategory(operation, action) {
+    if (operation) {
+        const method = operation.method.toLowerCase();
+        if (method === 'get') {
+            const hasPathParams = operation.parameters.some(param => param.in === 'path');
+            return hasPathParams ? 'read' : 'list';
+        }
+    }
+    const actionValue = typeof action === 'string' ? action.toLowerCase() : '';
+    if (actionValue === 'list' || actionValue === 'search') {
+        return 'list';
+    }
+    if (actionValue === 'get' || actionValue === 'read') {
+        return 'read';
+    }
+    return 'modify';
+}
+function dedupe(values) {
+    return Array.from(new Set(values));
+}
+function isPrimitiveValue(value) {
+    return ['string', 'number', 'boolean'].includes(typeof value);
+}
+function formatValue(value) {
+    if (value === undefined) {
+        return 'undefined';
+    }
+    if (value === null) {
+        return 'null';
+    }
+    if (Array.isArray(value)) {
+        return 'array';
+    }
+    if (typeof value === 'object') {
+        return 'object';
+    }
+    return String(value);
+}
+//# sourceMappingURL=filtering.js.map

package/dist/src/core/filtering.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filtering.js","sourceRoot":"","sources":["../../../src/core/filtering.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGlE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;AAC7D,MAAM,WAAW,GAAG,mCAAmC,CAAC;AASxD,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,MAAM,SAAS,GAAmB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEtD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,eAAe,CAAC,yEAAyE,CAAC,CAAC;YACvG,CAAC;YACD,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEvD,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,eAAe,CAAC,yEAAyE,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC,yEAAyE,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QAED,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,YAAY,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,yEAAyE,CAAC,CAAC;QACvG,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CACvB,6CAA6C,GAAG,qBAAqB,SAAS,GAAG,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1B,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAaD,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC/C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CACvB,mEAAmE,GAAG,IAAI,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAC9B,SAAyB,EACzB,OAAuB,EACvB,IAA6B,EAC7B,gBAA0C,EAC1C,SAAyB;IAEzB,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IACjE,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAE5E,kBAAkB,CAAC,UAAU,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAEpE,MAAM,kBAAkB,GAAG,uBAAuB,CAChD,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,eAAe,CAChB,CAAC;IACF,MAAM,oBAAoB,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE9E,OAAO;QACL,gBAAgB;QAChB,eAAe;QACf,kBAAkB;QAClB,oBAAoB;QACpB,iBAAiB;QACjB,iBAAiB,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;YACvD,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3E,CAAC,CAAC;QACF,WAAW,EAAE;YACX,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;YACzE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;SAC1E;QACD,MAAM,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,UAAoB,EACpB,SAAyB,EACzB,gBAAqC,EACrC,eAAiD;IAEjD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEvD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;QACnD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QACzB,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAAiB,EACjB,aAAuB,EACvB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IAE1C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,kBAAkB,CAC1B,wBAAwB,SAAS,uBAAuB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,WAAW,CAAC,IAAI,CAAC,IAAI,CACjH,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,kBAAkB,CAC1B,wBAAwB,SAAS,uBAAuB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,WAAW,IAAI,CAC3G,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,kBAAkB,CAC1B,wBAAwB,SAAS,uBAAuB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,WAAW,CAAC,QAAQ,CAAC,IAAI,CACrH,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,kBAAkB,CAC1B,wBAAwB,SAAS,uBAAuB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,WAAW,IAAI,CAC3G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAqB,EACrB,SAAiB,EACjB,IAA6B,EAC7B,OAAuB;IAEvB,MAAM,aAAa,GAAG,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,EAAE,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAC1E,MAAM,MAAM,GAAG,iBAAiB,KAAK,MAAM,CAAC;IAC5C,MAAM,MAAM,GAAG,iBAAiB,KAAK,MAAM,CAAC;IAC5C,MAAM,QAAQ,GAAG,iBAAiB,KAAK,QAAQ,CAAC;IAEhD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3E,OAAO;QACT,CAAC;QACD,IAAI,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,kBAAkB,CAC1B,8BAA8B,SAAS,eAAe,OAAO,CAAC,IAAI,aAAa,MAAM,IAAI,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,MAAM,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,kBAAkB,CAC1B,8BAA8B,SAAS,eAAe,OAAO,CAAC,IAAI,IAAI,CACvE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,sFAAsF;IACtF,oGAAoG;IACpG,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,sBAAsB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAMhC;IACC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAE5E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,uBAAuB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IAEjG,IAAI,GAAG,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACjE,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;YACjD,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,GAAG,CAAC,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,kBAAkB,CAC1B,8BAA8B,SAAS,eAAe,OAAO,CAAC,IAAI,aAAa,GAAG,CAAC,MAAM,IAAI,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,kBAAkB,CAC1B,oCAAoC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,IAAI,IAAI,CACvG,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;QACjD,0BAA0B,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,gBAA0C;IACvE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAAuB,EACvB,gBAA0C,EAC1C,gBAAqC;IAErC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEtD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QAC/D,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACrD,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,SAAS,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CACzB,UAAoB,EACpB,eAAiD,EACjD,UAA+C;IAE/C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3D,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,IAAI,eAAe,CACvB,uBAAuB,WAAW,CAAC,CAAC,CAAC,oBAAoB,WAAW,EAAE,CACvE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,eAAgD,EAAE,MAAc;IAC3F,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,YAAY,IAAI,eAAe,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA6B,EAAE,KAAe;IACtE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,wBAAwB,CAC/B,SAAoC,EACpC,MAAe;IAEf,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;YAC9E,OAAO,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACzC,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,WAAW,KAAK,KAAK,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/src/core/index.d.ts

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+/**
+ * CLI entry point
+ *
+ * Why: Reads env vars, initializes server, handles errors gracefully.
+ */
+import 'dotenv/config';
+/**
+ * Fetch OAuth Authorization Server Metadata (RFC 8414)
+ * Returns authorization_endpoint and token_endpoint
+ */
+export declare function fetchOAuthMetadata(issuerUrl: string): Promise<{
+    authorization_endpoint: string;
+    token_endpoint: string;
+} | null>;
+/**
+ * Derive OAuth issuer from API base URL
+ * Example: https://www.gitlab.com/api/v4 -> https://www.gitlab.com
+ */
+export declare function deriveIssuerFromBaseUrl(baseUrl: string): string | null;
+export declare function resolveHttpHostPort(): {
+    host: string;
+    port: number;
+};
+export declare function main(): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/index.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AAEH,OAAO,eAAe,CAAC;AAYvB;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,sBAAsB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAqBtI;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOtE;AAED,wBAAgB,mBAAmB,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CASpE;AAED,wBAAsB,IAAI,kBA6OzB"}